sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-11-20	Add ipa_auth	Sumit Bose	1	-0/+3
	To support IPA DS to Kerberos password migration a seperate authentication target is added. It calls the Kerberos authentication target and in the case of a 'Preauthentication Error' the LDAP authentication target. On success the Kerberos target is called again to request the TGT.
2009-11-20	Improve handling of ccache files	Sumit Bose	1	-97/+153
	- save current ccache file to sysdb - use the saved ccache file if the user has running processes - create an empty ccache if offline - return enviroment variables if offline
2009-11-20	Validate Kerberos credentials with local keytab	Sumit Bose	1	-2/+146

2009-11-06	Check is ccache structure is initialized before calling krb5_cc_destroy	Sumit Bose	1	-8/+16

2009-11-05	add replacements for missing Kerberos calls	Sumit Bose	1	-33/+7

2009-10-22	update krb5 option handling to new option scheme	Sumit Bose	1	-3/+38

2009-10-15	enable debugging of krb5_child	Sumit Bose	1	-2/+42

2009-10-12	fix a wrong argument to unpack_buffer	Sumit Bose	1	-18/+40
	- the patch to handle short read introduced a new variable len to store the amount of data read. Instead of using this variable unpack_buffer was called with the old variable ret. Thanks to mnagy@redhat.com for finding this. - this patch also fixes a potential error when the message size is equal to the buffer size.
2009-10-05	handle expired password during authentication	Sumit Bose	1	-2/+25

2009-09-25	fix possible short reads in kerberos provider	Sumit Bose	1	-10/+28

2009-09-24	added support for older MIT kerberos versions	sbose	1	-2/+29
	- make the build of the locator plugin optional - added a man page for the locator plugin - use krb5.h if krb5/krb5.h cannot be found - added alternatives for missing functions - set -DDBUS_API_SUBJECT_TO_CHANGE if libdbus version is lesser than 1.0.0
2009-09-14	fix the wrong usage of an offset	Sumit Bose	1	-1/+1

2009-09-14	add krb5ccache_dir and krb5ccname_template option	Sumit Bose	1	-26/+90
	The configuration options krb5ccache_dir and krb5ccname_template are added to the Kerberos provider to create the user's credential caches the same way as pam_krb5 does. Due to the design of the sssd and the supported ccache types of MIT Kerberos only files are allowed.
2009-09-11	use fork+exec for kerberos helper	Sumit Bose	1	-60/+253

2009-09-11	add change password target to krb5 backend	Sumit Bose	1	-0/+363